Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File: DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier: Q+F/eK3oU9QI3uv87dRVQabQ7ibiibsuGZMvvPTokHA=
Subject key identifier: 60:76:1A:E5:8F:34:BC:B4:68:94:92:76:A6:BF:45:D8:F5:BA:3F:CE
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 0199225607B38899560B326616CFD406A652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number: 1679
Signing time: Sun 07 Sep 2025 04:01:27 +0000
Manifest this update: Sun 07 Sep 2025 04:01:27 +0000
Manifest next update: Mon 08 Sep 2025 04:01:27 +0000
Files and hashes: 1: 2ruUNINuI6uV8MYI78EZQWS_RIg.roa (hash: VHS2lsqC+IJ5oxkyfws5q9amIcBNw+9L6nwp+Qj/0vY=)
2: 8i1g8XKNJedNWFOzfSsVo0JxCqM.roa (hash: qcd7n9F8BEzZZvgBgE1cIJu2JRF1Xvz0rV08SZQkPQw=)
3: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: U2VbvPeIkkNlx2xwyu6KV5Y/Vwt+EyGKyr+K+S+AbxA=)
4: lXftion8-6bSPXb1hByWoZWZToE.roa (hash: SvWuwU45VoYUssTvSq8q7tUVCqlmbl2PlDyAIGIPVcs=)
5: m8rrUo6uiDcirMi6Sl7eYgFmoKs.roa (hash: ooZ40cwVnj6zMgLWzk/b928qzd5lbFKtSTI7ArxTES8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:56:07:b3:88:99:56:0b:32:66:16:cf:d4:06:a6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Sep 7 04:01:27 2025 GMT
Not After : Sep 8 04:01:27 2025 GMT
Subject: CN=60761ae58f34bcb468949276a6bf45d8f5ba3fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0d:bd:02:eb:c6:0e:f7:c0:e1:a9:5e:25:1d:
bb:ac:9d:3f:58:65:73:b1:2b:b8:46:8a:dc:d9:ed:
54:96:da:06:1d:aa:b7:b5:1d:15:87:46:bd:25:23:
c4:61:11:b4:25:98:77:8f:27:25:fe:21:6c:78:ed:
41:e5:3f:43:4b:e7:ab:ac:1f:f6:25:14:da:5b:f0:
60:4f:14:1c:85:66:8b:d8:e0:fe:5c:83:b6:e1:aa:
96:38:a0:e5:35:aa:40:39:f9:38:a4:10:16:7d:89:
17:dd:13:d7:25:62:ac:ab:f5:7d:d3:5b:51:19:7a:
9d:32:ec:fa:44:3e:fd:4d:53:32:bb:db:08:ca:e6:
9f:3b:27:c9:ea:59:0c:dd:3c:3c:18:95:32:33:05:
f0:31:ce:ee:dc:bf:4d:6c:77:18:c7:57:19:bf:cf:
75:e7:31:6a:e1:fb:1b:32:f5:ce:43:b7:29:a9:0a:
2a:cd:e9:61:90:3f:c7:62:ac:12:45:20:6b:54:61:
0f:8f:fb:4f:2c:70:5f:e3:70:90:99:ff:f3:6e:3e:
bf:dc:29:93:03:8e:ee:9b:47:9f:a0:97:39:59:f4:
4d:fb:7d:ef:e2:23:8e:bf:c1:82:29:fa:7c:cf:46:
76:9e:fa:84:e9:8e:72:1f:71:5e:5d:10:a1:04:f8:
aa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:76:1A:E5:8F:34:BC:B4:68:94:92:76:A6:BF:45:D8:F5:BA:3F:CE
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:13:6c:46:ee:eb:b1:f8:0c:cf:f8:34:2d:b7:5e:e2:fa:08:
d2:1a:68:1b:85:a1:56:7f:a6:a1:af:b5:3f:c0:b5:e9:e4:7f:
5c:b0:0a:a8:2c:39:f6:98:f3:ea:30:3a:cd:f7:67:5a:6c:8c:
a5:ff:cc:ba:ba:8c:54:ff:91:44:8a:8c:69:5c:5c:c7:d2:bd:
79:d0:3b:3f:01:2b:52:25:5e:ad:b2:0e:bf:77:5d:78:67:de:
34:5c:3e:25:08:e7:51:51:d7:c9:1e:43:3f:99:5c:ad:08:89:
ef:84:a2:f6:8b:50:ac:80:ac:19:56:f1:e9:9a:e1:88:4a:74:
52:f8:6f:17:a7:d2:08:d5:9d:b1:cc:39:a2:8d:06:6f:74:67:
9b:ec:37:72:6f:6e:9b:0a:33:14:cb:d8:82:45:71:fa:bc:fb:
8c:95:be:8e:a3:5c:a5:a6:dc:41:4c:4d:2f:b6:9d:3c:6b:01:
e6:c1:33:88:b0:6b:12:7c:6f:e8:a8:7b:bf:53:ee:f7:7c:e8:
62:11:c7:62:4e:b6:3a:3b:99:34:4d:81:8d:4c:67:09:4c:c2:
f0:eb:fb:b4:f9:3a:35:97:e3:12:9d:0f:7d:19:6a:8f:b0:3c:
76:fc:8a:f9:12:af:6e:af:b3:e1:dc:62:6d:9d:c2:67:d7:50:
60:e5:06:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:21 2025 by rpki-client